Rule ID
SV-286741r1291386_rule
Version
V1R1
Information system logging capability is critical for accurate forensic analysis. Centralized management of log records provides for efficiency in maintenance and management of records, as well as the backup and archiving of those records. The Horizon Connection Server can be configured to ship all events to a syslog receiver. Multiple servers can be configured but only the User Datagram Protocol (UDP) is supported at this time. Satisfies: SRG-APP-000358-AS-000064, SRG-APP-000108-AS-000067, SRG-APP-000125-AS-000084, SRG-APP-000126-AS-000085, SRG-APP-000360-AS-000066, SRG-APP-000515-AS-000203, SRG-APP-000795-AS-000130, SRG-APP-000181-AS-000255
1. Log in to the Horizon Connection Server Console. 2. From the left pane, navigate to Settings >> Event Configuration. 3. In the right pane, locate the "Syslog" section with the configured syslog servers listed beneath. If there are no valid syslog servers configured, this is a finding.
1. Log in to the Horizon Connection Server Console. 2. From the left pane, navigate to Settings >> Event Configuration. 3. In the right pane, under "Syslog", click "Add". 4. Enter the address of the central log server and configure the port as necessary. 5. Click "OK". 6. Repeat for other Connection Servers as applicable.